General
- Target honeygain_app.apk
- Size 10.5MB
- Sample260722-hkwv2axtg1
- SHA256 85fbcfa036ac17fdfdef3bbb4c1e4bc8051911dd14fd97bd26afd30f681f8907
- MD5 7cfcca1ab4249da855f1db44d3051780
- SHA1 d0c638db877d1c5a4427871b341e1b7e459d13b3
- SHA512 45da7132073576303f868d1dbc7aaaf75f679b646fc29c511e766d5c1a8a4f086a5f0faa30c38fe9dfd3447cedf5f68d66da5ab0d561b5473e5ccf8dd5c37040
- SSDEEP 196608:xKCubIIuAHUS1yLm9SAvpfyBVhWEA+S7F0dw0hPj6nO0HGzQ+kyaKFd:U/b9umDjRfaJEF0LebHGzoKz
- TLSH T196B612C6FBE9D92EC47350728C5A52F1266A0C26CE82AF477454375C78B36E80F59BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
honeygain_app.apk
Resource
android-35-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target honeygain_app.apk
- Size 10.5MB
- SHA256 85fbcfa036ac17fdfdef3bbb4c1e4bc8051911dd14fd97bd26afd30f681f8907
- MD5 7cfcca1ab4249da855f1db44d3051780
- SHA1 d0c638db877d1c5a4427871b341e1b7e459d13b3
- SHA512 45da7132073576303f868d1dbc7aaaf75f679b646fc29c511e766d5c1a8a4f086a5f0faa30c38fe9dfd3447cedf5f68d66da5ab0d561b5473e5ccf8dd5c37040
- SSDEEP 196608:xKCubIIuAHUS1yLm9SAvpfyBVhWEA+S7F0dw0hPj6nO0HGzQ+kyaKFd:U/b9umDjRfaJEF0LebHGzoKz
- TLSH T196B612C6FBE9D92EC47350728C5A52F1266A0C26CE82AF477454375C78B36E80F59BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Acquires the wake lock
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Queries information about active data network
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation)